ISO Compliance Insights & Best Practices
CART
ISO Compliance Insights & Best Practices
An ISO 9001 gap analysis is the cheapest step in a certification project and the
one that makes everything after it estimable. It answers one question honestly, clause by clause:
what exists, what half exists, and what does not exist at all?
Not a score. The percentage is a by-product and it flatters everyone. The output that matters is a
costed, sequenced action list: for each gap, what is missing, who closes it, how long it takes, and
what it depends on. An assessment ending in a number tells you how you feel; one ending in a plan
tells you what to do on Monday.
Run it before you commit to a certification date. Certification bodies book months ahead and moving
a stage 2 audit costs money, so an honest ISO 9001 gap analysis is what makes the date credible in the
first place.
Four levels is enough, and more invites false precision:
The gap between the last two decides whether stage 2 succeeds. A process that started three weeks
ago is implemented, not effective, and an auditor sampling twelve months of records will establish
that in minutes.
A missing scope statement is an afternoon. Twelve months of monitoring data is twelve months. When
you convert the ISO 9001 gap analysis into a plan, sequence by how long each gap takes to close, and
put the slow ones first. The consistently slow items are:
Everything else — policy, scope, context, procedures — is fast, and it is exactly where
projects spend their first month because it feels productive.
Close the gaps with a documented set that already exists.
The ISO 9001 Toolkit covers every clause in editable MS Office format — 45+ procedures, forms and registers — so the documentation gaps close in days rather than weeks.
Someone who knows the standard and is prepared to be unpopular. The failure mode of an internal
assessment is generosity: the person who wrote the procedures scores the documentation clauses and
finds them excellent. If you cannot get genuine independence, get a second reviewer for clauses 4, 6
and 9 — context, risk and performance evaluation are where self-assessment is most reliably
optimistic.
Interview beyond the quality function. Ask an operator how they know a job is done right. Ask a
salesperson what happens when a customer complains. Those answers score clauses 8 and 10 more
accurately than reading a procedure ever will, and they surface the gap between the documented system
and the real one — which is the gap that actually fails audits.
For each gap record the clause, the missing evidence, the owner, the effort, the lead time and the
dependency. Sequence backwards from the target certification date with the long-lead items first, and
present it to management as a schedule with costs — clause 5.1 requires top management to ensure
resources are available, and a costed plan is how you ask for them.
Re-run the ISO 9001 gap analysis once more before booking stage 1. The second pass is quick and it
catches the clauses marked implemented in month two that quietly lapsed by month seven. From there,
our ISO 9001 implementation guide covers closing the
gaps and ISO 9001 certification covers what happens next.
All of these are covered by the ISO 9001 Toolkit, or start with the free ISO templates.
August 13, 2026
August 13, 2026
August 13, 2026
August 13, 2026